From owner-freebsd-questions Fri Jan 17 6:31: 6 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 23CD737B401 for ; Fri, 17 Jan 2003 06:31:05 -0800 (PST) Received: from freeze.org (freeze.org [63.106.140.202]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6068243F3F for ; Fri, 17 Jan 2003 06:31:04 -0800 (PST) (envelope-from jfreeze@freeze.org) Received: from freeze.org (localhost [127.0.0.1]) by freeze.org (8.12.5/8.12.5) with ESMTP id h0HEYvJI009314 for ; Fri, 17 Jan 2003 09:34:57 -0500 (EST) (envelope-from jfreeze@freeze.org) Received: (from jfreeze@localhost) by freeze.org (8.12.5/8.12.5/Submit) id h0HEYrhw009313 for FreeBSD-questions@FreeBSD.org; Fri, 17 Jan 2003 09:34:53 -0500 (EST) Date: Fri, 17 Jan 2003 09:34:53 -0500 From: Jim Freeze To: FreeBSD Questions Subject: Possible attack? Message-ID: <20030117093453.A9304@freeze.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i Name: Jim Freeze Phone: (859) 396-5439 Web-Pages: http://www.freeze.org http://www.freebsdportal.com Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi: I got an interesting log report today. Has anyone seen such messages lately? Jan 14 12:59:52 rabbit /kernel: ipfw: limit 100 reached on entry 64000 Jan 14 17:39:13 rabbit ftpd[1502]: ANONYMOUS FTP LOGIN REFUSED FROM p5089A961.dip.t-dialin.net Jan 14 17:39:13 rabbit ftpd[1503]: ANONYMOUS FTP LOGIN REFUSED FROM p5089A961.dip.t-dialin.net Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME Content-Disposition header due to field size (length = 25) (possible attack) Jan 15 17:33:03 rabbit ftpd[4434]: ANONYMOUS FTP LOGIN REFUSED FROM pD9E60C0F.dip.t-dialin.net Jan 15 17:33:04 rabbit ftpd[4435]: ANONYMOUS FTP LOGIN REFUSED FROM pD9E60C0F.dip.t-dialin.net Jan 15 23:59:48 rabbit sm-mta[5210]: h0G4xkJI005209: Truncated MIME Content-Disposition header due to field size (length = 22) (possible attack) -- Jim Freeze ---------- "It's not Camelot, but it's not Cleveland, either." -- Kevin White, mayor of Boston To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message